Mile2-Security CPTS - Certified Pen Testing Specialist

QUESTION NO: 1
Why is it important to the security of a network to create a complex password for the SA account on a MSSQL server installation?

A. The SA account can have privileges of the local administrators group on the host OS. B. The SA account is a pseudo-account and does not have any privileges. C. The SA account can add/delete or change Domain User accounts. D. The SA account is the most powerful account on the domain controller.

Correct Answer: A

QUESTION NO: 2
MS SQL server makes use of Stored Procedures. There is an extended stored procedure called sp_makewebtask that can be used with data being returned from executed queries.
What would you use this stored procedure for?

A. It is used to create and HTML page B. It is used to schedule a job task C. It is used to start a new web server instance D. It is used to perform an entry within a database

Correct Answer: A

QUESTION NO: 3
A system administrator deploys a Windows-based server in a publicly-accessible DMZ. The sole purpose of this machine is to run IIS and allow anonymous access. After a few days the security log is full of failed logins against the Administrator account. What is the best strategy to totally prevent future password guessing attempts? Choose the best answer.

A. Change the Administrator password to be even longer B. Remove File and Print Sharing for Microsoft Networks on the network adapter C. Enable account lockout D. Configure the security policy to shut down the system when the event log is full

Correct Answer: B

QUESTION NO: 4
Which of the following techniques would be effective to get around some of the blocking rules on certain firewalls?
The same technique could be used to avoid detection by Intrusion Detection Systems (IDS) in some cases.

A. Injection B. Spoofing C. Fragmentation D. Diffusion

Correct Answer: C

QUESTION NO: 5
Which of the following advanced search keywords do attackers take advantage of in order to see web page content without actually connecting to the target web server? Choose the best answer.

A. Link: B. Intitle: C. Cache: D. Allinurl:

Correct Answer: C

QUESTION NO: 6
Which of the following ports could be associated with a trojan on a Windows computer?
Choose two.

A. 3268 B. 12345 C. 27374 D. 135

Correct Answer: B,C

QUESTION NO: 7
There is a method which allows you to find information on hosts located behind a firewall by using packets similar to the packets used by Traceroute.
This method attempts to find out what are the rules in place on the gateway.
What is the name of this method?

A. Firewalking B. NULL Scan C. Tracert D. FWpenetrate

Correct Answer: A

QUESTION NO: 8
When a company wishes to have some assurance that a product is working as per the vendor claim they usually seek certification. One of the most commonly used certification schemes today is called Common Criteria (CC). Which of the following terms describe a product that is to be evaluated under the Common Criteria to see how well the product meets the claims made by the vendor?

A. Protection Profile B. Security Target C. Target of evaluation D. EAL4

Correct Answer: C

QUESTION NO: 9
One of your clients has been the victim of a brute force attack against their SSH server.
They ask you what could be done to protect their Linux servers. You propose the use of IPTables (the built in kernel firewall) to limit connection attempts to protect their servers.
You agree with your client to limit connections to the SSH port to a maximum of only three trials per minutes considering there is only one administrator who has a valid need to connect remotely onto this port.
If the threshold of three connections is exceeded, the attacker will have to wait for another
60 seconds before it will resume allowing connections again.
Which of the following IPTables entry would meet your clients needs?

A. iptables -A OUTPUT -p tcp --dport 22 -m state --state NEW -m recent --update -- seconds 60 --hitcount 4 --rttl --name SSH -j DROP B. iptables -A INPUT -p tcp --dport 23 -m state --state NEW -m recent --update --seconds
60 --hitcount 4 --rttl --name SSH -j DROP C. iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds
60 --hitcount 4 --rttl --name SSH -j DROP D. iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds
60 --hitcount 3 --rttl --name SSH -j DROP

Correct Answer: C

Mile2-Security CPTS - Certified Pen Testing Specialist - MK0-201 Exam Questions